DarkWidow. Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

github.com/boku7/DarkWidow

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.